CVE-2023-32882

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308616.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jan 2, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-328836.7In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi CVE-2023-328846.7In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege CVE-2023-328856.7In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with S CVE-2023-328867.5In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with CVE-2023-328877.5In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no addi CVE-2023-328887.5In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service wit CVE-2023-328897.5In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service wit CVE-2023-32896.5A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin). This r CVE-2023-328907.5In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additio CVE-2023-328916.7In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privi CVE-2023-32905.0A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results CVE-2023-32913.3Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.